Moving at the Speed of a Crisis: Integrated Incident Response & Recovery

Name: Moving at the Speed of a Crisis: Integrated Incident Response & Recovery
Start: 2026-09-25
End: 2026-09-25

This event qualifies for:

1 CPEs1 CLPs0.1 CECs

This panel focuses on the moment of truth: coordinated, rapid, and effective response when the inevitable occurs. When a cyber intrusion escalates into a kinetic crisis—disrupting power, transportation, or public safety at a major event—a unified, cross-domain response is essential.

This panel shifts the focus from prevention to action, examining the operational, policy, and political dimensions of managing a catastrophic incident:

How cyber incidents escalate into a kinetic attack, affecting the ability to respond to the critical incident
What first responders need to manage the incident
What preparations should be made in advance of a critical event
When a cyber incident escalates into real-world public safety impacts, how CISA defines its operational role in the first 24–72 hours—coordinating with DHS components, FEMA, state and local emergency management, and private sector owners—while balancing the need for decisive federal coordination with respect for state authority and private ownership
The importance of executing a coordinated recovery plan to rapidly restore safety and service to the event

There is a natural tension between preparing for worst-case scenarios and avoiding unnecessary alarm. CISA promotes joint preparedness across cyber and emergency management communities; you can help shift the focus from recovery to restoring public and stakeholder confidence when systems are back online.